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(TS//SI//NF) Business Records (BR) and Pen Register Trap and Trace (PR/TT) Bulk 
Metadata Programs 

(U) This module will enable you to: 

• fFS#SI//NF) Identify the purpose of the BR and PR/TT Bulk Metadata Programs 
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• fFS#SI//NF) Identify the ^^Foreign Powers covered by the BR and PR/TT Foreign 
Intelligence Surveillance Court (FISC) Orders 

• fFS#SI//NF) Contrast the differences in the authorities granted between BR FISC 


GRAPH IC/AV: 

(U) Present learning objectives in the travel 


Orders and PR/TT FISC Orders 




journal 


• (TS#SI//NF) Recognize the role of the Bulk Metadata Programs in the context of the 
broader set of SIGINT authorities 



( TS//S1//N F) (OGC Attorney): During the first part of our road trip we will discuss the Business Records (BR) and Pen Register Trap and Trace (PR/TT) 
Bulk Metadata Programs at a high level. As we progress on our road trip, we will discuss various aspects of the authorities granted by the Foreign 
Intelligence Surveillance Court (FISC) which support the BR and PR/TT programs and the policies that NSA implements to provide reasonable assurance 
that we are compliant with these authorities. 
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(U) This module will enable you to: 

• (TS//SJ#NF) Identify the purpose of the BR and PR/TT Bulk Metadata Programs 

• (TS//SI//NF) Identify the ^^Foreign Powers covered by the BR and PR/TT Foreign Intelligence Surveillance Court (FISC) Orders 

• (T S//S I//N in the authorities granted between BR FISC Orders and PR/TT FISC Orders 

• (TS//SJ#NF) Recognize the role of the Bulk Metadata Programs in the context of the broader set of SIGINT authorities 
Scroll over text for foreign powers: 

(TS//St//NF) Under the FISA statute, a foreign power can include “a group engaged in international terrorism or activities in preparation therefore.” 
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Possible cutaway images 



may include: 



( TS//S I //NF ) The purpose of the BR and PR/TT Bulk Metadata Programs is to support 
the Counterterrorism mission. 

( TS//S I //NF ) Bulk metadata consists of “unselected” communications events, and the 
BR and PR/TT Bulk Metadata programs complement NSA’s traditional selection-based 
intelligence collection. 



• images pertinent to telephone and 
internet communications, 
terrorism and counterterrorism, 
and legal iconography 

• image depicting notional storage 
of bulk metadata and U.S. person 
information 



(TS / /S I/ / N F ) (OGC Attorney): The BR and PR/TT programs are supported by two special authorities granted by the FISC which permit NSAto obtain 
telephony and internet communications bulk metadata from U.S. -based telecommunications service providers. The authority was granted by the FISC in 
support of the Counterterrorism mission to permit NSA to learn more about a terrorist target’s communications, even those terrorists potentially 
located in the United States. 



(TS//S I //NF ) Bulk metadata consists of “unselected” communications events, and the BR and PR/TT Bulk Metadata Programs complement NSA’s 
traditional selection-based intelligence collection. 

(TS//S I //NF ) As you can probably imagine, bulk internet and telephony metadata, acquired within the United States, contains information to, from, or about 
U.S. persons. Therefore, because there is unminimized U.S. person information included within this type of metadata, there are special rules and 
procedures we must follow when acquiring, processing, accessing, storing, sharing, and disseminating this information. This metadata is highly sensitive 
which is why we have this specialized training. 

( TS / /S I/ / N F ) In this course we discuss the metadata we collect, how we collect it, what we are permitted to do with it as well as other special rules and 
procedures we must follow. 
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(OGC Attorney): To get started, let’s discuss the individual Bulk Metadata Programs. The BR Program pertains to the acquisition of telephony 
metadata. The associated FISC Order allows NSA to ask specific U.S. -based telecommunications service providers for their business records. The 
business records, also known as call detail records, contain information about phone calls. 

(TS//SI//NF) ThePR/TT proqramandassociatedFISCQrderpermi^ metadata. f 

Under both these FISC orders, NSA is pr ohibited from acquiring com munications content. Under these Program s, NSA may not listen to 
phone calls, or collect the body or subiect of an email The Bulk Metadata authorities permit 

about the communications. 



In Module 2, we will explore how each type of metadata is obtained and what specific information each order permits NSA to collect. 
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(TS//S 1 //N F) (OGC Attorney): Due to the sensitivity of the data and the desire to protect the privacy of U.S. persons, the FISC imposes restrictions on how 
we can touch the data. For the purposes of this course, by “touch” we mean any activity where there is an opportunity to commit a violation with regards to 
the Orders governing these authorities. We recognize that it takes a very diverse team of individuals working to see that the data is properly acquired, 
routed, prepared, stored, then queried, shared and disseminated. From acquisition to dissemination, including management and compliance, if you play a 
role in enabling this data to be used for its intelligence value, we consider you to be someone who “touches” this data. 



( TS//S I //N F) NSA’s goal is to provide reasonable assurance that we are complying with the law AND making the most of these authorities to support the 
counterterrorism mission and protect the United States. 
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(TS//S 1 //N F) (OGC Attorney): BR and PR/TT are two separate orders issued by the FISC, though the general access, sharing, dissemination, and retention 
rules are the same for the two programs. Those similarities are why the training for both is covered in thi^cou^e^AdditionaM^ jDothOrdei^araeUh^ame 
jKouo^^fenecHcnr^h^Ordei^^h^omiar^ower^Th^omiar^owers named in the orders arenT^"^^^"^"^^ 

Both the prog 

Articulable Suspicion, or RAS, to gain approval to query the bulk metadata with an identifier. We will get into much more detail about these two topics in 
later modules. 
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(T S/ / SI/ / N F ) (OGC Attorney): There are two high level differences between the Orders as well. Details oOhedifferenceswillbe^ in later modules, 

but at a basic level, the biggest difference between the two Programs is how the metadata is obtained. 



(TS//S I //NF ) The other point where the Bulk Metadata Programs differ is in the area of hop restrictions for contact chaining. This will be described in detail 
in Module 4, but for now it is important to know that according to the Orders the hop restrictions are different for the BR and PR/TT Programs. 
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( TS//S I //NF) (OGC Attorney): NSA must reapply to the FISC every 90 days to continue operating under these authorities. This process allows for the 
Government to seek modifications and for the FISC to update these authorities to reflect changes that may affect NSA’s collection and handling of BR and 
PR/TT bulk metadata. It is also crucial that all factors associated with NSA’s implementation of these programs are fully compliant with the FISC Orders 
and guidelines. 



(TS//S I //NF) As new orders are issued, this training may be augmented to address significant changes. Your organization will notify you if or when 
additional training is necessary. Should you have questions, you are strongly encouraged to contact your manager, Counterterrorism (CT) Homeland 
Security Analysis Center (HSAC), Technology Directorate (TD) Compliance, SID Oversight and Compliance, or the Office of General Counsel (OGC) for 
assistance and guidance. 
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(TS//SI//NF) NSA may perform SIGINT functions under various FISA authorities to include: 

• NSA FISA 

• FBI FISA 

• FAA Section 702 

• FAA Section 704 

• FAA Section 705(b) 
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BR and PR/TT Bulk Metadata Programs provide analysts with another opportunity to 
a target 

By leveraging various collection authorities, analysts can fill existing knowledge gaps 



gain unique 



on their 



(TS//SP/NF) (OGC Attorney): Now that you have a better understanding of what the BR and PR/TT Bulk Metadata Programs are, you may be wondering 
where these programs fit in the context of the broader set of SIGINT authorities. 

(TS//SI//NF) Recall from OVSC1 100, the Overview of Signals Intelligence Authorities, that we learned that in addition to E.O. 12333, NSA may perform 
SIGINT functions under various FISA authorities to include NSA FISA, FBI FISA, FISA Amendments Act (FAA) Section 702, 704, and 705(b). While there 
are specific rules governing when and how these authorities may be applied, each of these authorities has the potential to provide a valuable and unique 
complement to our E.O. 12333 collection resources. Similarly, the BR and PR/TT Bulk Metadata Programs provide analysts with another opportunity to 
gain unique collection on a target. By leveraging as many of these various collection authorities available to them as permitted, analysts can fill existing 
knowledge gaps on their target. 

(TS//SP/NF) One prime example of how an analyst leveraged several of these collection authorities to close crucial knowledge gaps on a target occurred in 
Fall 2009, when a CT analyst pieced together information obtained from E.O. 12333, FAA 702, and BR FISA authorities to reveal a terrorist plot on the New 
York subway system, which was subsequently disrupted by the FBI. 



TOP SECRET//SI//NOFORN 
Page 9 of 14 



TOP SECRET//SI//NOFORN 



DATE/PREPARER: SLS 



FRAME ID: 1075 



Topic 

(U) The Role of the Bulk 
Metadata Programs (cont.) 

Home 



Page Classification 

TGP-GEGRET//SP/NOFORN 



Exit 



Glossary 



Back 



Screen Number 
9 of 12 



Next 



NEXT FRAME ID: 1080 



( TS//SI//NF ) Similarities between SPCMA and BR & PR/TT 

• fFS//SI //N F-)-Both involve exclusively metadata 

• fTS//St //N F) Both allow for querying of U.S. person identifiers under specific circumstances 



BACK FRAME ID: 1070 
ALT TAG: 
GRAPHIC/AV: 



(TS//SI//NF) Differences between SPCMA and BR & PR/TT 
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{TS//SP/NF) (GGC Attorney): It is also important to understand what the BR and PR/TT Bulk Metadata programs are not. You may have heard of SPCMA - 
the Supplemental Procedures Governing Communications Metadata Analysis. They allow NSA to treat communications metadata differently than content in 
the course of the analysis of communications metadata already lawfully collected under E.O. 12333, NSA FISA, FBI FISA, FAA 702^(Ranc^05(b^^_ 
authorities. Specifically , given a valid and documented foreign intelligence purpose, these new procedures permit contact chaining, 
■■■■■^■^^■ximmunications metadata identifier, irrespective of nationality or location, in order to follow or discover valid foreign intelligence 
targets. What SPCMA and the BR and PR/TT programs have in common, then, is that they both exclusively involve metadata, and allow for queries of 
identifiers belonging to U.S. persons. 



(TS//SWNF) Unlike SPCMA, however, the BR and PR/TT Programs authorize the acquisition of unselected, bulk metadata. Because of the sensitivity of 
this metadata, it may only be queried with identifiers for which RAS exists to believe that the identifier is directly associated with the Foreign Powers 
specified in the Court Order granted by the FISC. You will learn much more about the RAS standard in Module 3. 
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(U) Knowledge Check 

1. ( TS A S P/NF) What is the purpose of the BR and PR/TT Bulk Metadata Programs? 

a) fFSASP/NF) To permit NSA to learn more about a terrorist target’s communications, even 
those terrorists potentially located in the United States 

b) (TSASP/NF) To give NSA the authority to collect and analyze the content of foreign and domestic 
terrorist telecommunications traffic 

c) ( TS A S P/NF) To enable NSA to more effectively collect and analyze telep hony and internet 
communications metadata associated with the|J 

d) (U) All of the above 



The BR and PR/TT Bulk Metadata Programs enable NSA to query identifiers related to. 

a) All terrorists regardless of their affiliation and origin. 

b) Terrorists/terrorist groups associated with Foreign Powers, X . 

c) Any foreign intelligence target. 

d) Terrorists/terrorist groups associated withBWHBBWWWHHB^ 



(U) (OGC Attorney): Let’s make a few notes in our travel journal and check to see what you remember from this topic! 



ANSWERS: 

Question 1 : ( TSAS I A NF) Correct! The purpose of the BR and PR/TT Bulk Metadata Programs is to permit NSA to learn more about a terrorist target’s 
communications, even those terrorists potentially located in the United States. 

( TSAS I A NF) Incorrect. The correct answer is a). The purpose of the BR and PR/TT Bulk Metadata Programs is to permit NSA to learn more about a 
terrorist target’s communications, even those terrorists potentially located in the United States. 

Quest ion 2 : ( TS A S P/NF) Correct! The BR and PR/TT Bulk Metadata Programs enable NSA to query identifiers related to terrorists/terrorist groups who fall 
under ■■Foreign Powers^IBH^^^^I 

(TSASIANF) Incorrect. The correct answer isb)^heBRandJ PR/TT Bulk Metadata Programs enable NSA to query identifiers related to terrorists/terrorist 
groups who fall und er Fo reign Powers^B^^^^^^^B 
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3. (TSASJANF) One of the differences between BR and PR/TT is that the is composed of call detail 

records delivered by the telecommunications providers, while the must be processed/extracted from 

live, streaming Internet communications. 

a) bulk metadata, PR/TT metadata 

b) PR/TT metadata, bulk metadata 

c) PR/TT metadata, BR metadata 

d) BR metadata, PR/TT metadata 
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4. (TS//SP/NF) Which of the following is true of BR and PR/TT and not other authorities? 

a) (TS//SP/NF) In the BR and PR/TT authorities, NSA is authorized to obtain metadata in bulk from 
U.S.-based telecommunications service providers that may not be available from other collection 
sources, and NSA can only query that metadata for counter proliferation purposes. 

b) (TS//SP/NF) In the BR and PR/TT authorities, NSA is authorized to obtain content from U.S.- 
based telecommunications service providers that may not be available from other collection 
sources, and NSA can only query that content for counterterrorism purposes. 

c) (TS//SJ//l\iF) In the BR and PR/TT authorities, NSA is authorized to obtain metadata in bulk 
from U.S.-based telecommunications service providers that may not be available from 
other collection sources, and NSA can only query that metadata for counterterrorism 
purposes. 

d) (TS//SP/NF) In the BR and PR/TT authorities, NSA is authorized to obtain metadata in bulk from 
foreign telecommunications service providers that may not be available from other collection 
sources, and NSA can query that intelligence for any foreign intelligence purpose. 



(No audio or transcript on this page) 



ANSWERS: 

QuestionS^fTS^SI^NRCoirectlOneofthedifferencesbetw^ 

Question 4: (TS //S I // NF) Correct! In the BR and PR/TT authorities, NSA is authorized to obtain metadata in bulk from U.S. -based telecommunications 
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service providers that may not be available from other collection sources, and NSA can only query that metadata for counterterrorism purposes. 
(TS//SJ//NE) Incorrect. The correct answer is c). In the BR and PR/TT authorities, NSA is authorized to obtain metadata in bulk from U.S. -based 
telecommunications service providers that may not be available from other collection sources, and NSA can only query that metadata for 
counterterrorism purposes. 
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(U//FOUO) (GGC Attorney): Now that we hav 

• (TS//SWNF) Identify the purpose of tt 

• (TS//SI//NF) Identify the^^oreign 1 

• (TS//SI//NF) Contrast the differences 

• (TS//SP/NF) Recognize the role of th< 


e completed the first part of our road trip, you should be able to: 
le BR and PR/TT Bulk Metadata Programs 

Powers covered by the BR and PR/TT Foreign Intelligence Surveillance Court (FISC) Orders 
in the authorities granted between BR FISC Orders and PR/TT FISC Orders 
5 Bulk Metadata Programs in the context of the broader set of SIGINT authorities 
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